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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1 . (Original) A method of access control for a movable network managed 
by a mobile router, wherein said mobile router is interconnected through a bi-directional 
link with a mobility anchoring agent that anchors the network mobility for the mobile 
router, said method comprising the steps of: 

exercising access control at the mobility anchoring agent to filter 
downlink packets to said mobile router; and 

exercising access control at said mobile router to filter uplink 
packets to said mobility anchoring agent. 

2. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a home agent in a home network of said mobile router. 

3. (Original) The method of claim 1 , wherein said mobility anchoring 
agent is a local forwarding agent in a visited network. 

4. (Original) The method of claim 1 , wherein said mobility anchoring 
agent runs a NEMO-based (Network Mobility) mobility support protocol with said mobile 
router. 

5. (Original) The method of claim 4, wherein said mobile router is 
interconnected with said mobility anchoring agent through a NEMO bi-directional tunnel, 
and downlink packets are filtered before said NEMO bi-directional tunnel, and uplink 
packets are filtered before said NEMO bi-directional tunnel. 
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6. (Original) The method of claim 1 , wherein said step of exercising 
access control at the mobility anchoring agent involves checking headers of IP packets 
that traverse an access control point in said mobility anchoring agent, and said step of 
exercising access control at said mobile router involves checking headers of IP packets 
that traverse an access control point in said mobile router. 

7. (Original) The method of claim 1 , further comprising the step 
provisioning an access control module at said mobility anchoring agent and an access 
control module at said mobile router with provisioning information from an access 
control source. 

8. (Original) The method of claim 7, wherein said provisioning step 
comprises the steps of: 

transferring provisioning information for the access control modules 
in both said mobility anchoring agent and said mobile router from said access control 
source to said mobility anchoring agent; and 

subsequently forwarding provisioning information for the access 
control module in said mobile router from said mobility anchoring agent to said mobile 
router over the bi-directional link. 

9. (Original) The method of claim 8, wherein said provisioning information 
for the access control module in said mobile router includes provisioning information 
related only to the uplink from said mobile router to said mobility anchoring agent. 

10. (Canceled) 

1 1 . (Currently Amended) The method of claim 7, wherein said access 
control source is implemented in an Authentication. Authorization and Accounting (AAA) 
AAA client, and provisioning information related to a node in said movable network is 
transferred from an AAA server associated with the home network of said node to said 
AAA client and the access control source. 
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12-15. (Canceled) 

1 6. (Original) An arrangement for access control for a movable network 
managed by a mobile router, wherein said mobile router is interconnected through a bi- 
directional link with a mobility anchoring agent that anchors the network mobility for the 
mobile router, said arrangement comprising: 

means for exercising access control at the mobility anchoring agent 
to filter downlink packets to said mobile router; and 

means for exercising access control at said mobile router to filter 
uplink packets to said mobility anchoring agent. 

17-18. (Canceled) 

19. (Original) The arrangement of claim 16, wherein said mobile router 
and said mobility anchoring agent are configured to run a NEMO-based (Network 
Mobility) mobility support protocol. 

20. (Original) The arrangement of claim 19, wherein said mobile router is 
interconnected with said mobility anchoring agent through a NEMO bi-directional tunnel, 
and said access control exercising means at said mobility anchoring agent is operable 
for filtering said downlink packets before said NEMO bi-directional tunnel, and said 
access control exercising means at said mobile router is operable for filtering said uplink 
packets before said NEMO bi-directional tunnel. 

21 - 30. (Canceled) 

31 . (Original) A mobility anchoring agent for anchoring network mobility for 
a mobile router that manages a movable network, wherein said mobility anchoring agent 
comprises: 
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means for interconnection with said mobile router through a bi- 
directional link; and 

means for exercising access control to monitor and filter downlink 
packets to said mobile router. 

32. (Original) The mobility anchoring agent of claim 31 , wherein said 
mobility anchoring agent is configured to run a NEMO-based (Network Mobility) mobility 
support protocol with said mobile router. 

33. (Original) The mobility anchoring agent of claim 31 , wherein said 
mobility anchoring agent is configured for interconnection with said mobile router 
through a NEMO bi-directional tunnel, and said means for exercising access control is 
operable for filtering said downlink packets before said NEMO bi-directional tunnel. 

34. (Original) The mobility anchoring agent of claim 31 , wherein said 
means for exercising access control is operable for checking headers of packets that 
traverse an access control point in said mobility anchoring agent. 

35. (Original) The mobility anchoring agent of claim 31 , further comprising: 

means for receiving provisioning information for access control at 
both said mobility anchoring agent and said mobile router from an access control 
source; 

means for forwarding provisioning information for access control at 
said mobile router to said mobile router. 

36. (Original) The mobility anchoring agent of claim 35, wherein said 
provisioning information for access control at said mobile router includes information 
related only to the uplink from said mobile router to said mobility anchoring agent. 

37. (Canceled) 
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38. (Original) An access control enforcement module for operation with a 
mobility anchoring agent that anchors network mobility for a mobile router managing a 
movable network, said mobile router being interconnected through a bi-directional link 
with said mobility anchoring agent, wherein said access control enforcement module is 
operable for exercising access control to monitor and filter downlink packets to said 
mobile router. 
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